
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@tryforge/forge.linked
Advanced tools
Music made stronger with Lavalink for ForgeScript.
[!CAUTION] ⚠️ Warning
ForgeLinked is not compatible with ForgeMusic at the moment. Use it only if you understand Lavalink and its setup.
To install ForgeLinked in your project, use:
npm install @tryforge/forge.linked
If you're using a different package manager, look up how to install Node.js dependencies accordingly.
First, import ForgeLink
and ForgeClient
in your main file:
const { ForgeClient } = require('@tryforge/forgescript');
const { ForgeLink } = require('@tryforge/forge.link');
Then, create a new instance of ForgeLink
with event listeners and Lavalink nodes:
const lavalink = new ForgeLink({
events: {
kazagumo: ['playerStart'],
shoukaku: ['debug', 'ready']
},
kazagumoOptions: {
defaultSearchEngine: 'youtube'
},
nodes: [
{
name: 'Public Node',
auth: 'youshallnotpass',
url: 'lavalink.jirayu.net:13592',
secure: false
}
]
});
Now, create the ForgeClient
and attach lavalink
as an extension:
const client = new ForgeClient({
intents: [
'Guilds',
'GuildMessages',
'MessageContent',
'GuildVoiceStates'
],
events: [
'messageCreate'
],
extensions: [lavalink],
prefixes: ['.']
});
[!INFO] ⚠️ Important
Ensure yourForgeClient
has theGuildVoiceStates
intent enabled for ForgeLink functions to work properly.
ForgeLinked allows you to listen to specific Lavalink events. To do this, define them inside the events
object:
const lavalink = new ForgeLink({
events: {
kazagumo: ['playerStart'],
shoukaku: ['debug', 'ready']
}
});
Then, you can add custom event handlers:
lavalink.commands.kazagumo.add({
type: 'playerStart',
code: '$log[A track started playing now.]'
});
lavalink.commands.shoukaku.add(
{
type: 'debug',
code: '$log[NODE "$env[name]" -> $env[info]]'
},
{
type: 'ready',
code: '$log[NODE "$env[name]" IS READY]'
}
);
To connect ForgeLinked to a Lavalink server, provide the nodes
parameter in the setup:
const lavalink = new ForgeLink({
events: {
kazagumo: ['playerStart'],
shoukaku: ['debug', 'ready']
},
nodes: [
{
name: 'Public Node',
auth: 'youshallnotpass',
url: 'lavalink.jirayu.net:13592',
secure: false
}
]
});
You can find public Lavalink nodes online or host your own.
Lavalink supports multiple search engines. To specify a default, add it under kazagumoOptions
:
const lavalink = new ForgeLink({
kazagumoOptions: {
defaultSearchEngine: 'youtube'
}
});
Many thanks to everyone who contributed to this project! ❤️
Special thanks to Cyberghost for assisting with the event and command managers—without them, this wouldn’t have been possible!
This package was developed with ♥️ by Econome.
We hope you enjoy using ForgeLink!
FAQs
A Lavalink implementation made for ForgeScript.
The npm package @tryforge/forge.linked receives a total of 1 weekly downloads. As such, @tryforge/forge.linked popularity was classified as not popular.
We found that @tryforge/forge.linked demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.